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DATA CARRI ER BELONGI NG TO AN AUTHOR I ZED DOM Al N 

DESCRI PTI ON 

5 Field of the invention 

The present invention relates to a data carrier for carrying data content belonging to 
an authorized domain. Said invention further relates to a reading apparatus for importing 
data content from such a data carrier. The invention also relates to a writing apparatus for 
exporting data content to such a data carrier. The invention also relates to a method of 
10 exporting data content from a writing apparatus to such a data carrier. The invention also 
relates to a method of importing data content from a data carrier to a reading apparatus. 

The invention is particularly relevant in the domain of data right management for 
compact discs and digital versatile discs. 

15 Domain of the invention 

Data Right Management (DRM) describes protection of rights and management of 
rules related to accessing and processing digital information. These rights and rules govern 
various aspects of a digital content, such as who owns the digital content, how and when the 
digital content can be accessed and how much the digital content may cost. 

20 One type of digital right management scheme commonly used is a copy-based 

approach, in which a master copy of the digital content is stored and managed by a digital 
data right management system running on a server. The digital content is cryptographically 
tied to this system, which is trusted to decide when and if to provide requested digital 
content information. There are typically a limited number of available copies for each piece 

25 of digital content. 

A data carrier usually comprises an internal copy-based data right management 
system. For instance, Digital Versatile Discs Video (DVD-Video) comprise a system called 
CSS, rewritable DVDs a CPRM system (Oopy Protection for Recordable Media) and 
MemorySticks comprise a system called (Open) MagicGate. These systems prevent any copy 

30 of the digital content stored into the data carrier. 

Another type of digital right management scheme is a domain-based approach. 
International Patent Application number WO02/086725 describes a communication device 
operable in such a domain based data right management approach. An authorized domain 
contains a limited number of registered communication devices. Access to digital content 

35 that is bound to the domain is restricted to the communication devices, which belong to the 
domain. 
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A drawback of such a domain based environment is that domain related data rights 
attached to a digital content are lost when copying the digital content into a data carrier, 
such as, for instance, an optical storage medium. 

5 Summary of the invention 

The object of the invention is to provide a solution, which prevents a digital content 
from losing its domain related rights when copied into a data carrier. 

This is achieved with a data carrier for carrying a data content belonging to an 
authorized domain, said data carrier comprising a data carrier data right management 
10 system, said data carrier data right management system being ruled by first rights of 

exporting the data content to a reading apparatus, said authorized domain comprising a 
domain data right management system, said domain data right management system being 
rules by second rights of exporting said data content to a reading apparatus, said second 
rights depending on whether said authorized domain comprises said reading apparatus, said 
15 data carrier comprising: 

- said data content, stored as a data carrier data content file having a data carrier 
format specif ied by said data carrier data right management system, 

- a data carrier license comprising said first rights, 

- a domain license comprising said second rights, said domain license being stored as 
20 a data carrier domain license file having said data carrier format. 

With the invention, the data content exported from the domain to the data carrier is 
protected by the data carrier data right management system. Domain rights attached to the 
digital content are stored into the data carrier as a domain related license. The domain 

25 related license is also protected by the data carrier data right management system. Said 

domain rights are released to a reading apparatus belonging to the authorized domain, when 
said reading apparatus reads the data carrier. Therefore, the domain rights are not lost 
when transferring the data content from a domain data right management system to a data 
carrier data right management system. 

30 ... 

Brief description of the drawings 

The invention will be further described with reference to the accompanying 
drawings: 

35 - Fig. 1 shows a schematic drawing of an authorized domain in accordance with the 

invention, 
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Fig. 2 describes in a functional way a method of exporting data content from an 
authorized domain to a data carrier in accordance with the invention, 
Fig. 3 describes in a functional way a method of importing data content from a data 
carrier to a reading apparatus in accordance with the invention, 
5 Rg. 4 shows a schematic drawing of a data carrier in accordance with a first 

embodiment of the invention, 

Rg. 5 shows a schematic drawing of a data carrier in accordance with a first variant 
of the second embodiment of the invention, 

Rg. 6 shows a schematic drawing of a data carrier in accordance with a second 
10 variant of the second embodiment of the invention. 



Detailed description of the invention 

15 Referring to Rg. 1, an authorized domain AD comprises a plurality of unconnected 

clusters, for instance a first cluster CL, and a second cluster CU. The first cluster CU 
comprises a first communication device D 1a a second communication device D 2 and a third 
communication device Cfe. The second cluster CL* comprises a fourth communication device 
D 4 and a fifth communication device Dfe. The communication devices of a same cluster are 

20 interconnected. The authorized domain AD is for instance an in-home digital communication 
system comprising a plurality of personal digital communication devices like a PC, a mobile 
phone, a car stereo or a set-top-box. Within this authorized domain, unrestricted and 
uncomplicated access to data content OONT like editing, storage or playback is provided, 
while data exchange from the authorized domain AD to another authorized domain is strictly 

25 controlled. 

However, the invention is not restricted to in-home authorized domains, but 
concerns any authorized domain comprising communication devices, which are connected to 
each other by any kind of network link, such as Internet. 

In order to handle internal and external data exchanges, the authorized domain AD 

30 comprises a domain data right management system AD-DRM. Such an AD-DRM system 

defines usage domain rights Ft, which describe the operations that a user can apply to the 
data content, depending whether it belongs or not to the authorized domain. For instance, 
within the authorized domain, the domain rights usually allow unlimited copy of the data 
content. The AD-DRM system may implement one of the following approaches: 

35 - in a first approach, the communication devices (D^Ds) belonging to the authorized 

domain share a domain secret, for instance a cryptographic key, which enables to 
decrypt the domain related data content COIMT. In this case, the AD-DRM comprises 



4 



means for encrypting and means for decrypting the data content into a domain 
content file DCF using such a domain secret, 

in a second approach, communication between communication devices (D r D&) is 
controlled so as to ensure that the domain rights Ffe are enforced. In this case, the 
5 AD-DRM system comprises licensing means for assigning a domain license DL 

comprising the domain rights Ffe to the data content CONT. These rights Ffe are 
checked before any transfer of this data content in order to ensure that only trusted 
devices can access the data content, 
- in a third approach, an additional protection of the domain license DL used in the 
10 second approach is provided , for instance using a cryptographic key. 

It should be noted that in the case of an authorized domain AD comprising 
communication devices linked to a service provider via the Internet, the AD-DRM system is a 
DRM system currently used on the Internet. Such a DRM system, for instance EMMS from 
15 I BM, relies on a direct communication channel with the service provider. Data content is 
encrypted before being transmitted via the direct communication channel. The authorized 
domain may also comprise a digital broadcast system. In this case, the AD-DRM system may 
include a conditional access system such as, for instance Philips Cryptoworks. 

20 Referring to Rg. 1, the first cluster CU and the second cluster CU are not connected 

by a network. I n order to transfer data content OONT from the first cluster CLi to the second 
cluster CU, a removable data carrier DC, like for instance an optical storage medium or a 
flash card is needed. 

The data carrier DC in accordance with the invention comprises a data carrier data 

25 right management system M-DRM for protecting the data content CONT to be stored within 
the data carrier against illegal copies. Such a M-DRM system defines usage data carrier 
rights R|, which describe the operations that a user can apply to the data content. Usually 
these data carrier rights allow unrestricted playback of the data content, but limit copying to 
a single backup only. The M-DRM system comprises licensing means for associating a data 

30 , carrier lioense ML comprising the data carrier rights with the data content CONT. I n 
addition, the M-DRM system usually, but not always comprises means for encrypting the 
data content OONT. As a matter of fact, CDs do not include any native copy protection 
scheme, but all recent optical storage media like DVDs or B!u-Ray discs support some kind of 
M-DRM system. 

35 It is to be noted that in most traditional data carriers, the M-DRM system is 

implemented partly in the data carrier, partly in the reading apparatus. For instance, an 
optical storage medium like a DVD comprises M-DRM data, that is the usage rights or the 
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cryptographic key to allow playing the optical storage medium in any compatible reading 
apparatus, while the reading apparatus comprises the processing means for processing said 
necessary data, for instance for running a decryption algorithm. However, some data carriers 
like for instance flash cards, comprise some chips and therefore have processing means for 
5 directly processing the decryption. 

The data carrier DC in accordance with the invention comprises the encrypted or not 
encrypted data content CONT, stored within a data carrier content file DCCF having a data 
carrier format, which is specified by the data carrier data right management system M-DRM. 
The data carrier DC further comprises the data carrier license ML and the domain license DL 

10 

Rg. 2 describes a method of exporting the data content OONTfrom a communication 
device D t comprising a writing apparatus WA to the data carrier DC in accordance with the 
invention. Said method comprises a step 1 of embedding the data content OONT into a data 
carrier data content file OCF, said data carrier data content file OCF having a data carrier 
15 format specified by the data carrier data right management system M-DRM. The exporting 
method in accordance with the invention further comprises a step 2 of copying the domain 
license DL into the data carrier DC as a data carrier domain license file CDLF. It is to be 
noted that the data carrier license ML is included into the data carrier and does not need to 
be copied. 

20 It is assumed that the data carrier DC already comprises the data carrier license ML As 

a matter of fact, said data carrier license belongs to the data carrier data right management 
system M-DRM, which may have been implemented in the data carrier during the 
manufacturing process. 

Such a method is implemented by a writing apparatus WA comprising embedding means 

25 for embedding the data content OONT into the data carrier data content file OCF and 
domain data right management means for copying the domain license DL into the data 
carrier DC. 

Rg. 3 describes a method of importing the data content OONT from a data carrier DC to 
30 a reading apparatus RA in accordance with the invention, said reading apparatus RA being 
included into a communication device D 4 . Said importing method comprises a step 3 of 
checking the data carrier license ML stored into the data carrier DC within the data carrier 
license file CLF in order to extract the first rights Ri attached to the content OONT. The 
importing method further comprises a step 4 of checking the domain license DL stored into 
35 the data carrier DC within the data carrier domain license file CDLF, in order to extract the 
second rights Ffe attached to the content OONT. The importing method in accordance with 
the invention further comprises a step 5 of domain identification for checking if the reading 
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apparatus RA belongs to the authorized domain AD or not. The reading apparatus is 
assumed to belong to an authorized domain AD 1 . Said step 5, well known to those skilled in 
the art, for instance consists in comparing a domain identifier ID of the authorized domain 
AD a domain identifier I D' of the authorized domain AD\ Said identifiers I D and I D 1 are for 

5 instance the domain secret or any domain identification code. I n the data carrier DC, said 
identifier is for instance stored in the domain license DL The importing method in 
accordance with the invention finally comprises a step 6 of providing the reading apparatus 
RA with rights to access the data content (CONT), said rights depending on whether the 
reading apparatus belongs to the authorized domain. At least, the reading apparatus RA has 

10 the first rights FV If it belongs to the authorized domain AD, the second rights Ffe are added 
to the rights F^. 

Such a method is implemented by a reading apparatus comprising data carrier checking 
means for checking the data carrier license ML and outputting the first rights R,, domain 
checking means for checking the domain license DL and outputting the second rights Ffe, 
15 domain identification means for checking if the reading apparatus RA belongs to the 

authorized domain AD and data right application means for providing the reading apparatus 
RA with rights to access the data content CONT, said rights depending on whether the 
reading apparatus belongs to the authorized domain. 

20 

Hg. 4 describes in a schematic way a data carrier DCt in accordance with a first 
embodiment of the invention. The data carrier DQ comprises a data carrier data content file 
OCF, which comprises a domain data content file DCF. The domain data content file DCF 
comprises the data content OONT. The domain data content DCF file has a domain format, 

25 which is specified by the domain data right management system AD-DRM. The data carrier 
DC, further comprises a data carrier domain license file CDLF, which comprises a domain 
license file DLF comprising the domain license DL and having the domain format. 

Within the authorized domain AD, the data content CONT is stored into the domain 
data content file DCF and the domain license DL is stored into the domain license file DLF. I n 

30 the first embodiment of the invention, said domain data content file DCF and said domain 
license file DLF are embedded as such into the data carrier data content file OCF and the 
data carrier domain license file CDLF, respectively. The domain data content file DCF and the 
domain license file DLF are only transported, but not interpreted by the data carrier data 
right management system M-DRM. Such an interpretation is achieved by the reading 

35 apparatus of the communication device importing the data content, which comprises AD- 

DRM means for processing the domain data content file DCF and the domain license file DLF. 
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An advantage of the first embodiment of the invention is that no change of the data 
carrier related data right management system M-DRM is needed in order to process the data 
content CONT stored into the data carrier DCi as a domain related data content, in particular 
in order to transfer and apply the domain rights F\> attached to the data content CONT. 
5 A variant to this first embodiment of the invention is to store the domain license DL 

into the same data carrier content file OCF as the data content CONT. An advantage of such 
a variant is that all domain related data are stored into a single file, which simplifies their 
processing by the reading apparatus. 

10 Referring to Rg. 5, a data carrier DQ> in accordance with a second embodiment of 

the invention comprises a data carrier data content file OCF, in which the data content CONT 
has been converted from the domain format specified by the domain data right management 
system AD-DRM into the data carrier format. 

An advantage is that the format in which the data content is stored is known by the 
15 data carrier, which makes play back of the data content CONT possible from the data carrier. 
In a first variant of this second embodiment of the invention, the data carrier further 
comprises a secure memory space, also called Key Locker KL for storing the data carrier 
license ML and the domain license DL Said key locker KL is a protected area in the data 
carrier, which can only be accessed by a compliant reading apparatus. Such an allocation of 
20 secure memory space in the data carrier DQ> is achieved by an information binding 

mechanism (IBM), which binds information stored within the key locker KLto the data carrier 
DQ>. The key locker guarantees the following properties with respect to the data it contains: 
confidentiality, because only the M-DRM system of the data carrier can access the 
data carrier license ML and the domain license DL, 
25 - integrity, because the M-DRM and the AD-DRM can detect unauthorized changes to 

the rights stored in the data carrier and domain licenses, 
- authenticity, because only the M-DRM system can store the data carrier and domain 
licenses. 

An example of such an Information Binding Mechanism is a standard system, also called 
30 Key Locker, which has been created by Philips and Sony and is planned to be deployed in 
future products. 

With this first variant of the second embodiment of the invention, the M-DRM system 
of the reading apparatus accesses the data stored into the key locker. If the reading 
apparatus comprises the AD-DRM system, the M-DRM system will release the domain license 
35 DL to the AD-DRM system. Consequently, when the reading apparatus only comprises the M- 
DRM system, only the first rights Rt are applied to the data content OONT. In the contrary, 
when the reading apparatus comprises in addition the AD-DRM system, the M-DRM system 
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releases the domain license to the AD-DRM system. Therefore, the second rights Ffe of the 
data content are preserved and added to the first rights R,. With the first variant of the 
second embodiment of the invention, the data carrier related data right management M-DRM 
system is changed in order to be able to check whether the domain license DL can be 
5 released or not to another DRM system included into the reading apparatus. 

A first advantage of this first variant of the second embodiment of the invention is 
that the data carrier DQ> is able to carry various licenses coming from several data right 
management systems and to release the licenses corresponding to the reading apparatus 
RA, which reads the data carrier DQ>. For a reading apparatus, which does not belong to the 

10 authorized domain AD, the data carrier DQ> will ignore the domain license DL In the 

contrary, for a reading apparatus belonging to the authorized domain AD, the data carrier 
DCz will provide both data carrier and domain licenses. 

Another advantage of the first variant of the second embodiment of the invention is 
that the solution proposed is not specific to AD-DFIM systems. As a matter of fact, the key 

15 locker can store licenses coming from any non M-DRM system. 

Fig. 6 describes in a schematic way a data carrier DQj in accordance with a second 
variant of the second embodiment of the invention. The data carrier DCb comprises a data 
carrier license file CLF, which comprises the domain license DL In other words, the domain 
license DL is embedded into the data carrier license ML The data carrier data right 

20 management system M-DRM is not able to understand the domain license DL but it is asked 
to release it, when the data carrier DQj is read by a reading apparatus RA comprising the 
AD-DRM system. An advantage of the second variant of the second embodiment of the 
invention is to give an alternative to the information binding mechanism (IBM) for data 
carriers, which do not have the information binding mechanism available. 

25 

It should be noted that the above-mentioned embodiments illustrate rather than 
limit the invention, and that those skilled in the art will be able to design many alternative 
embodiments without departing from the scope of the appended claims. I n this respect the 
following closing remarks are made: there are numerous ways of implementing functions by 

30 means of items of hardware or software, or both. In this respect, the drawings of Figs. 2 and 
3 are very diagrammatic, each representing only one possible embodiment of the invention. 
Thus, although a drawing shows different functions as different blocks, this by no means 
excludes that a single item of hardware or software carries out several functions, nor does it 
exclude that a single function is carried out by an assembly of items of hardware or 

35 software, or both. In the claims, any reference signs places between parentheses shall not 
be construed as limiting the claims. The word "comprising" does not exclude the presence of 
elements or steps other than those listed in a claim. The word "a" or "an" preceding an 
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element does not exclude the presence of a plurality of such elements. The mere fact that 
certain measures are recited in mutually different dependent claims does not indicate that 
combination of these measures cannot be used to advantage. 
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QLAIMS 

1 . A data carrier (DC, DQ, DQ>, DC3) for carrying a data content (OONT) belonging to 
an authorized domain (AD), said data carrier comprising a data carrier data right 
5 management system (M-DRM), said data carrier data right management system 

being ruled by first rights (R0 of exporting the data content (OONT) to a reading 
apparatus (RA), said authorized domain (AD) comprising a domain data right 
management system (AD-DRM), said domain data right management system being 
ruled by second rights (Ffe) of exporting said data content (OONT) to a reading 
10 apparatus (RA), said second rights (Ffe) depending on whether said authorized 

domain comprises said reading apparatus, said data carrier comprising: 

- Mid data content (OONT), stored within a data carrier data content file (OCF) having 
a data carrier format specified by said data carrier data right management system 
(M-DRM), 

15 a data carrier license (ML) comprising said first rights (Ri), 

- a domain license (DL) comprising said second rights (Ffe), said domain license (DL) 
being stored as a data carrier domain license file (CDLF) having said data carrier 
format. 



20 2. A data carrier as claimed in claim 1 , wherein said data carrier data content file 

(OCF) comprises a domain data content file (DCF) including said data content 
(OONT) and said data carrier domain license file (CDLF) comprises a domain license 
file (DLF) including said domain license (DL), said domain data content file (DCF) 
and said domain license file (DLF) having a domain format, said domain format 

25 being specified by said domain data right management system (AD-DRM). 

3. A data carrier as claimed in claim 1 , wherein said data content (CONT) stored within 
the data carrier data content file (OCF) has been oonverted from a domain format 
specified by said domain data right management system (AD-DRM) to the data 
30 carrier format (M-DRM). 



4. A data carrier as claimed in claim 2, wherein said data carrier (DCy comprises a 
secure memory space (KL) for storing the data carrier license (ML) and the domain 
license (DL). 

35 

5. A data carrier as claimed in claim 2, wherein said data carrier license (ML) comprises 
said domain license (DL). 
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A writing apparatus (WA) for exporting a data content (OONT) from an authorized 
domain (AD) to a data carrier (DC, DCt, DQ>, DQj), said data carrier comprising a 
data carrier data right management system (M-DRM) being ruled by first rights (RO 
of exporting the data oontent (OONT) from the authorized domain (AD) to the data 
carrier, said authorized domain comprising a domain data right management system 
(AD-DRM) being ruled by second rights (Ffe) of exporting the data content within the 
authorized domain, said writing apparatus comprising: 

embedding means for embedding said data content (OONT) into a data carrier data 
content file (OCF), said data carrier data content file having a data carrier format 
specified by the data carrier data right management system (M-DRM), 
domain data right management means for copying a domain license (DL) into the 
data carrier (DQ DQ, DQ>, DCb) as a data carrier domain license file (CDLF) having 
said data carrier format, said domain license (DL) comprising said second rights (Re). 

A reading apparatus (RA) for importing a data content (CONT) belonging to an 
authorized domain (AD) from a data carrier (DC, DQ, DQ>, DCb), said data carrier 
comprising a data carrier license (ML) comprising first rights (RO of exporting the 
data content (OONT) from said data carrier to said reading apparatus (RA), said data 
carrier further comprising a domain license (DL) comprising second rights (Ffe) of 
exporting said data content from said data carrier to said reading apparatus (RA), 
said second rights depending on whether said authorized domain (AD) comprises 
said reading apparatus (RA) , said reading apparatus comprising: 
data carrier checking means for checking said data carrier license (ML) and 
outputting said first rights (Ri), 

domain checking means for checking said domain license (DL) and outputting said 
second rights (R2), 

domain identification means for checking if the reading apparatus (RA) belongs to 
the authorized domain (AD), 

data right application means for providing the reading apparatus (RA) with rights to 
aocess the data content (CONT), said rights depending on said first and second 
rights (R u Ffe) and whether the reading apparatus belongs to the authorized domain. 

A method of exporting a data content (OONT) from an authorized domain (AD) into 
a data carrier (DC, DC}, DQ>, DQ*), said data carrier comprising a data carrier data 
right management system (M-DRM) being ruled by first rights (Rt) of exporting the 
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data content (CONT) from the authorized domain into the data carrier, said 
authorized domain (AD) comprising a domain data right management system (AD- 
DRM) being ruled by second rights (Ffe) of exporting the data content (OONT) within 
the authorized domain (AD), said method comprising the steps of: 
embedding (1) the data content (OONT) into a data carrier data content file (OOF), 
said data carrier data content file having a data carrier format specified by the data 
carrier data right management system (M-DRM), 

copying (2) a domain license (DL) into the data carrier (DC, DC,, DQ>, DCb), said 
domain license comprising said second rights (R>). 

A method of importing a data content (CONT) from a data carrier (DC, DQ, DCb, . 
DCb) to a reading apparatus (RA), said data content (OONT) belonging to an 
authorized domain (AD), said data carrier comprising a data carrier data right 
management system (M-DRM) being ruled by first rights (RO of exporting the data 
content (OONT) from the data carrier to a reading apparatus, said authorized 
domain (AD) comprising a domain data right management system (AD-DRM) being 
ruled by second rights (Ffe) of exporting the data content (OONT) from the data 
carrier (DC, DC,, DQ>, DCb) to the reading apparatus (RA), said second rights (Ffe) 
depending on whether the authorized domain (AD) comprises said reading 
apparatus, said method comprising the steps of: 

checking (3) a data carrier license (ML) stored into the data carrier, said data carrier 
related license comprising said first rights (R^, 

checking (4) a domain license (DL) stored into the data carrier, said domain license 
comprising said second rights (Ffe), 

identifying (5) if the reading apparatus (AD) belongs to the authorized domain (AD), 
providing (6) the reading apparatus (RA) with rights to access the data content 
(CONT), said rights depending said first and second rights (R,, Ffe) and on whether 
the reading apparatus belongs to the authorized domain. 



13 

Abstract 

The invention relates to a data carrier (DC) for carrying a data content (OONT) 
belonging to an authorized domain (AD). Said data carrier (DC) comprises a data carrier data 
right management system (M-DRM), ruled by first rights (Ri) of exporting said data content 
5 (OONT) to a reading apparatus (RA). Said authorized domain comprises a domain data right 
management system (AD-DRM), ruled by second rights (Ffc) of exporting said data content 
(COMT) to a reading apparatus (RA), said second rights depending on whether the reading 
apparatus belongs to the authorized domain. 

The data carrier (DC) comprises said data content (OONT), stored within a data 
10 carrier data content file (OOF) having a data carrier format specified by said data carrier data 
right management system (M-DRM), a data carrier license (ML) comprising said first rights 
(Ri) and a domain license (DL) comprising said second rights (Ffe) , said domain license (DL) 
being stored as a data carrier domain license file (CDLF) having said data carrier format. 
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